The Grouper Deprovisioning Report should be used in cases where a deprovisioning administrator doesn't deprovision certain memberships/privileges. This can be due to:
- Human intervention is required (someone wants to see it)
- The system of record is outside of Grouper and loaded in
- a group shouldn't be deprovisioned (e.g. lockout group)
The deprovisioning report can be viewed by the object admins (or to a user who has UPDATE/READ privileges for the group).
You can initiate the Deprovisiong Report as shown here:
Click on deprovisioning actions => deprovisioning report
See the report, you can mark the report as certified or remove access